Debian/s3ql: high 7.5
S3QL before 2.27 mishandles checksumming, and consequently allows replay attacks in which an attacker who controls the backend can present old versions of the filesystem metadata database as up-to-dat
Action: Upgrade s3ql to 2.27.1+dfsg-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.27.1+dfsg-1 | - |
Fixed versions
| 2.27.1+dfsg-1 |
Sources
- osv: DEBIAN-CVE-2018-12088#Debian:14/s3ql
- https://security-tracker.debian.org/tracker/CVE-2018-12088
published · modified · JSON